Re:Master password in Firefox or Thunderbird? Do not bother
by kuschku on Saturday March 10, 2018 @07:21PM
(#16560901)
I did, but that assumes the average person. This is HN, not Facebook, so we can make different assumptions.
E.g., we can assume that everyone has read the famous XKCD on passwords, and is using passwords that are a bunch of words after another, in lowercase ascii, which would get us somewhere around 80 bits of security, and still keep it memorable.
"This article estimates that the average password is merely 40 bits strong, and that estimate is already higher than some of the others. In order to guess a 40 bit password you will need to test 2^39 guesses on average. If you do the math, cracking a password will take merely a minute on average then. Sure, you could choose a stronger password. But finding a considerably stronger password that you can still remember will be awfully hard."